473,218 Members | 1,822 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,218 software developers and data experts.

mod_php not secure?

Hi all,

I noticed that with Slackware they don't include
mod_php in the latest distro. I also noticed some
talk on the web that there was an insecurity
issue with mod_php in a previous version of
Slackware.

So is this just a Slackware mishap or is there
a good reason to no longer permit PHP from
Apache?

Thanks for any (nonpartisan) info-

Jul 17 '05 #1
6 2206
On 26 Jun 2005 06:03:22 -0700, ya********@yahoo.com wrote:
I noticed that with Slackware they don't include
mod_php in the latest distro.
ftp://ftp.slackware.com/pub/slackwar...t/slackware/n/
http://www.slackware.com/pb/showdesc...-4.3.11-i486-1
http://download.mirror.ac.uk/sites/f....10-i486-1.txt

Looks included to me?
I also noticed some
talk on the web that there was an insecurity
issue with mod_php in a previous version of
Slackware.


This one?

http://www.slackware.com/security/vi...ecurity.437272

That was upgrading to the latest version of PHP due to a security issue found
in there. AFAIK it's safe again now.

--
Andy Hassall / <an**@andyh.co.uk> / <http://www.andyh.co.uk>
<http://www.andyhsoftware.co.uk/space> Space: disk usage analysis tool
Jul 17 '05 #2
>Looks included to me?

No... look in the tarball. There are no files such as
mod_php*.so.

It's missing.

Jul 17 '05 #3
*** ya********@yahoo.com wrote/escribió (26 Jun 2005 17:02:31 -0700):
No... look in the tarball. There are no files such as
mod_php*.so.

It's missing.


I'm running PHP as Apache 2 module in Red Hat 9 and there's no such file as
mod_php.so or the like. Are you sure the regular php package doesn't
include all you need?
--
-- Álvaro G. Vicario - Burgos, Spain
-- http://bits.demogracia.com - Mi sitio sobre programación web
-- Don't e-mail me your questions, post them to the group
--
Jul 17 '05 #4


Alvaro G Vicario wrote:
I'm running PHP as Apache 2 module in Red Hat 9 and there's no such file as
mod_php.so or the like. Are you sure the regular php package doesn't
include all you need?


No, but in the documentation it says I need to use
a file in /usr/libexec/apache called mod_php.so or something.
The only php-related file in that directory is libphp4.so,
which I tried specifying but it doesn't work.

It would be easier for me to write my own simple
web server than deal with this hassle.

Incidentally:

Could it be that Apache is so popular because the people
using it are not programmers?

Jul 17 '05 #5
*** ya********@yahoo.com wrote/escribió (27 Jun 2005 03:50:44 -0700):
No, but in the documentation it says I need to use
a file in /usr/libexec/apache called mod_php.so or something.
The only php-related file in that directory is libphp4.so,
which I tried specifying but it doesn't work.

It would be easier for me to write my own simple
web server than deal with this hassle.


That's the reason why I never recompile anything. Binary packages work out
of the box and I love that :)
--
-- Álvaro G. Vicario - Burgos, Spain
-- http://bits.demogracia.com - Mi sitio sobre programación web
-- Don't e-mail me your questions, post them to the group
--
Jul 17 '05 #6
On 27 Jun 2005 03:50:44 -0700, ya********@yahoo.com wrote:
Alvaro G Vicario wrote:
I'm running PHP as Apache 2 module in Red Hat 9 and there's no such file as
mod_php.so or the like. Are you sure the regular php package doesn't
include all you need?
No, but in the documentation it says I need to use
a file in /usr/libexec/apache called mod_php.so or something.


Which documentation?

http://www.google.com/search?q=mod_p...w.php.net&l=en

There are some hits on Google for "mod_php.so" but several refer to PHP3. Is
perhaps mod_php an alternate name used on some distros to fit in with naming
conventions? Doesn't seem to be the default, at least not nowadays.
The only php-related file in that directory is libphp4.so,
That is the Apache loadable module for PHP. There's no mod_php.so on my system
either.
which I tried specifying but it doesn't work.


Doesn't it?

--
Andy Hassall / <an**@andyh.co.uk> / <http://www.andyh.co.uk>
<http://www.andyhsoftware.co.uk/space> Space: disk usage analysis tool
Jul 17 '05 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
by: zaphod | last post by:
I've recently considered switching from mod_perl to mod_php because mod_perl, unless configured with multiple servers/ports/IP addresses, serves static HTML from mod_perl processes, which is...
40
by: Shufen | last post by:
Hi all, Can someone who has use PHP before and know quite well about the language, tell me what are the stuffs that Python offers and PHP doesn't. A few examples will be nice. I know about the...
3
by: emilper | last post by:
Hi, while using mod_php in apache: If I am including one .inc file in one page, does it get compiled and kept in memory so when I include the same file in another page on the same server, the...
5
by: howachen | last post by:
hi, which package you perfer? mod_php on apache is okay but some people said fastcgi version of php is faster, is it true? thanks...
7
by: Vincent Delporte | last post by:
Hello I'm interested in hearing reflections by seasoned web app developpers about the different ways to write PHP apps, and especially how they compare in terms of performance, whether it's the...
0
by: R.A.M. | last post by:
Hello, I am using Fedora 7 Moonshine Linux with Apache installed. I have installed PHP5 using command: yum install php. Then I configured httpd adding module mod_php.so to httpd.conf (and other...
2
by: Evil Son | last post by:
Hello group, If I switched from mod_php to fast-cgi, would I need to make any changes to my php source? Also, will something like APC still be useful? Will my database connections suddenly...
4
by: setesting001 | last post by:
How many of you are running Fast CGI instead of the popular mod_php? I planning to change to fast cgi since my applications need around 15MB memory to handle a single request, so consider if...
7
by: yawnmoth | last post by:
Correct me if I'm wrong, but isn't running PHP via mod_php faster than running it via CGI? If so, why would a web hosting company be running PHP via CGI and not mod_php? I asked that very...
0
by: veera ravala | last post by:
ServiceNow is a powerful cloud-based platform that offers a wide range of services to help organizations manage their workflows, operations, and IT services more efficiently. At its core, ServiceNow...
3
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 3 Jan 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). For other local times, please check World Time Buddy In...
0
by: jianzs | last post by:
Introduction Cloud-native applications are conventionally identified as those designed and nurtured on cloud infrastructure. Such applications, rooted in cloud technologies, skillfully benefit from...
2
by: jimatqsi | last post by:
The boss wants the word "CONFIDENTIAL" overlaying certain reports. He wants it large, slanted across the page, on every page, very light gray, outlined letters, not block letters. I thought Word Art...
2
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 7 Feb 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:30 (7.30PM). In this month's session, the creator of the excellent VBE...
0
by: fareedcanada | last post by:
Hello I am trying to split number on their count. suppose i have 121314151617 (12cnt) then number should be split like 12,13,14,15,16,17 and if 11314151617 (11cnt) then should be split like...
0
by: stefan129 | last post by:
Hey forum members, I'm exploring options for SSL certificates for multiple domains. Has anyone had experience with multi-domain SSL certificates? Any recommendations on reliable providers or specific...
1
by: davi5007 | last post by:
Hi, Basically, I am trying to automate a field named TraceabilityNo into a web page from an access form. I've got the serial held in the variable strSearchString. How can I get this into the...
0
by: MeoLessi9 | last post by:
I have VirtualBox installed on Windows 11 and now I would like to install Kali on a virtual machine. However, on the official website, I see two options: "Installer images" and "Virtual machines"....

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.